04/02/2007 15:08 



3105137S85 



DISCOVISION 



RiCEiVED 



CENTRAL FAX CENTER 



PASE 03 



APR 0 2 2007 



Docket No. PR 1803.01 US 
USSN: 10/605.173 



PATENT 
Art Unit: 2135 



This listing of claims will replace all prior versions, and listings of claims in 
the application: 

LISTING OF CLAIMS; 

+ 

1 . (Currently Amended) A method for generating a shared key comprising: 
providing a first certificate from a first peer to a second peer, the first 

certificate including a plurality of first parameter s, the first peer and second peer 
being communicated over a network: 

performing a first exponentiation operation to generate a first pubHc key 
from the second peer using at least one parameter of the plurality of first 
parameters and a first private key from the second pee r, wherein the first 
parameters being digit al signature standard parameters : 

providing a second certificate and the first public key from the second peer 
to the first peer, the second certificate comprising a plurality of second parameters; 

performing a second exponentiation operation to generate a shared secret 
key for the second peer using at least one parameter from the plurality of first 
parameters; 

performing a third exponentiation operation to generate the shared secret 
key for the first peer using the first public key from the second peer and a private 
key from the first peer, 

« 

2. (Original) The method according to claim 1 wherein the first certificate is a 
DSA type certificate. 

■ 

3. (Original) The method according to claim 2 wherein the first and second 
parameters comprise a prime number p dsSf a prime number q dS3t a generator g d33 
and a public key for the first and second peers, respectively. 
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4. (Original) The method according to claim 3 wherein the first exponentiation 
operation to generate the first public key is Y R = g dss A X R mod p dss where X R is a 
one-time private key from the second peer. 

5. (Original) The method according to claim 4 wherein the second 
exponentiation operation to generate the shared secret key for the second peer is 

Y$sk = YAdss A Xr mod p dss where Y Adss is a DSS public key from certificate of 
peer A. 

6. (Original) The method according to claim 5 wherein Y Adss = gdss A X A dss 
mod p dS9 where X Ad8s is a DSS private key from certificate of peer A. 

7. (Original) The method according to claim 5 wherein the third exponentiation 
operation to generate the shared secret key for the first peer is Yssk = Yr A X AdS s 
mod p dss where X Ads s is a DSS private key from certificate of peer A. 

8. (Original) The method according to claim 1 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

< 

9. (Currently Amended) An article of manufacture comprising: 

a machine accessible medium including data that, when accessed by a 
machine, causes the machine to perform operations comprising: 

providing a first certificate from a first peer to a second peer, the first 
certificate including a plurality of first parameters; 

performing a first exponentiation operation to generate a first public key 
from the second peer using the plurality of first parameters and the first private key 
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from the second pee r, wherein the first parameters being digital signature standard 

■ 

parameters : 

* 

providing a second certificate and the first public key from the second peer 
to the first peer, the second certificate comprising a plurality of second parameters; 

performing a second exponentiation operation to generate a shared secret 
key for the second peer using at least one parameter from the plurality of first 
parameters; 

performing a third exponentiation operation to generate the shared secret 
key for the first peer using the first public key from the second peer and a private 
key from the first peer. 

10. (Original) The article of manufacture according to claim 9 wherein the first 

* 

certificate is a DSA type certificate. 

11 . (Original) The article of manufacture according to claim 10 wherein the first 
and second parameters comprise a prime number p^, a prime number q dss , a 
generator g^ and a public key for the first and second peers, respectively. 

12. (Original) The article of manufacture according to claim 1 1 wherein the first 
exponentiation operation to generate the first public key is Yr = gdss A X* mod p^s 
where Xr is a one-time private key from the second peer. 

13. (Original) The article of manufacture according to claim 12 wherein the 
second exponentiation operation to generate the shared secret key for the second 
peer is Y SSK = Y A <j 9 9 A Xr mod p d$ $ where Ya<jss is a DSS public key from certificate 
of peer A. 
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14. (Original) The article of manufacture according to claim 13 wherein Y Adss = 
9dss A XAdss mod p d9S where X^dss is a DSS private key from certificate of peer A. 

15. (Original) The article of manufacture according to claim 13 wherein the third 
exponentiation operation to generate the shared secret key for the first peer is 
Yssk = Y R A mod Pdsa where X Ad99 is a DSS private key from certificate of 

peer A. 

16. (Original) The article of manufacture according to claim 9 wherein the first 
and second certificates are sent to the second and first peers, respectively, over a 
wireless network. 

1 7. (Currently Amended) A system comprising: 
a processor; and 

a memory coupled to the processor, the memory containing program code 
that, when executed by the processor, causes the processor to: 

provide a first certificate from a first peer to a second peer, the first 
certificate including a plurality of first parameters , the first peer and second peer 
being communicated over a network: 

perform a first exponentiation operation to generate a first public key from 

the second peer using the plurality of first parameters and the first private key from 
the second pee r: the second parameters being digital signature standard 

parameters ; 

provide a second certificate and the first public key from the second peer to 



the first peer; the second certificate comprising a plurality of second parameters; 

perform a second exponentiation operation to generate a shared secret key 
for the second peer using at least one parameter from the plurality of first 
parameters; 
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performing a third exponentiation operation to generate the shared secret 
key for the first peer using the first public key from the second peer and a private 
key from the first peer. 

18. (Original) The system according to claim 17 wherein the first certificate is a 
DSA type certificate. 

19. (Original) The system according to claim 18 wherein the first and second 
parameters comprise a prime number p^, a prime number q^, a generator g dss 
and a public key for the first and second peers, respectively. 

20. (Original) The system according to claim 19 wherein the first exponentiation 
operation to generate the first public key is Y R = g dss A X R mod p dss where X R is a 

* 

one-time private key from the second peer. 

21. (Original) The system according to claim 20 wherein the second 
exponentiation operation to generate the shared secret key for the second peer is 

Yssk = YAdss A mod p<j$ $ where YAdss is a DSS public key from certificate of 
peer A. 

22. (Original) The system according to claim 21 wherein YAdss = 9dss A XAdss 
where X Adss is a DSS private key from certificate of peer A. 

23. (Original) The system according to claim 21 wherein the third 
exponentiation operation to generate the shared secret key for the first peer is 

Yssk = Y R a XacIss mod Pdss where X A dss is a DSS private key from certificate of 
peer A. 
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24. (Original) The system according to claim 17 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 
network. 

25. (Currently Amended) A method comprising: 

receiving by a second peer a first certificate of a first peer including a 
plurality first parameters , the first peer and second peer being communicated over 
a network : 

performing a first exponentiation operation to generate a first public key 
using at least one parameter of the plurality of first parameters and a first private 
ke y: the second parameters being digital signature standard parameters : 

receiving a second certificate and the first public key, the second certificate 
including a plurality of second parameters; 

performing a second exponentiation operation to generate a first shared 
secret key using at least one parameter from the plurality of first parameters; 

performing a third exponentiation operation to generate a second shared 
secret key using the first public key and a private key. 

26. (Original) The method according to claim 25 wherein the first certificate is a 
DSA type certificate. 

27. (Original) The method according to claim 26 wherein the first and second 
parameters each comprises a prime number pass, a prime number q^^r a 
generator g d s$and a public key. 

28. (Original) The method according to claim 27 wherein the first exponentiation 
operation to generate the first public key is Y R = g dss A X* mod Pdss where Xr is a 
one-time private key. 
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29. (Original) The method according to claim 28 wherein the second 
exponentiation operation to generate the first shared secret key for the second 

peer is Yssk = YAdss A Xr mod Pd SS where Y A( jss is a DSS public key. 

30. (Original) The method according to claim 29 wherein Ya^s = 9dss A XAdss 
mod pass where XAdss is a DSS private key. 

31. (Original) The method according to claim 29 wherein the third 
exponentiation operation to generate a second shared secret key is Yssk ~ a 
XAdss mod Pdss where XAdss is a DSS private key. 

32. (Original) The method according to claim 25 wherein the first and second 
certificates are sent to the second and first peers, respectively, over a wireless 



33. (New) The method according to claim 1 wherein the network be one of a 

wireless network and a Bluetooth network. 

34. (New) The system according to claim 17 wherein the network be one of a 
wireless network and a Bluetooth network, 

35. (New) The method according to claim 24 wherein the network be one of a 
wireless network and a Bluetooth network. 
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